IT Security Analyst

John Clements Consultants, Inc.; Metro Manila; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

John Clements Consultants, Inc. is seeking an experienced IT Security professional to lead third-party risk management initiatives and support vendor risk assessments across global partners.

The role focuses on assessing, monitoring, and mitigating cybersecurity risks while ensuring policy compliance and industry standards. You will collaborate with internal stakeholders, produce risk reports, and contribute to the continuous improvement of risk management frameworks in a multinational

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or related field.
• Minimum of 5 years of Third-Party Risk Management experience, preferably in a multinational environment.
• Strong understanding of information security threats and risk management, networking fundamentals, incident response, access control, encryption, and MFA.

Responsibilities

• Conduct third-party security risk assessments and due diligence reviews.
• Evaluate vendor security controls and identify potential risks.
• Collaborate with internal stakeholders to address risk findings and remediation plans.
• Monitor ongoing vendor compliance and risk exposure.
• Support the development and enhancement of third-party risk management frameworks and processes.
• Prepare risk reports and recommendations for management.

Skills

Third-Party Risk Management

Information security

Networking basics

Incident response

MFA & encryption

Stakeholder management

Analytical thinking

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft 365 Security Suite

Privileged Access Management (PAM)

Vulnerability Management tools

Security monitoring tools

Job description

About the role

We are seeking an experienced IT Security professional to lead and support third-party risk management initiatives. The role focuses on assessing, monitoring, and mitigating cybersecurity risks associated with vendors, suppliers, and other external partners while ensuring compliance with security policies and industry standards.

Key responsibilities

• Conduct third-party security risk assessments and due diligence reviews.

• Evaluate vendor security controls and identify potential risks.

• Collaborate with internal stakeholders to address risk findings and remediation plans.

• Monitor ongoing vendor compliance and risk exposure.

• Support the development and enhancement of third-party risk management frameworks and processes.

• Prepare risk reports and recommendations for management.

Qualifications

• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related field.

• Minimum of 5 years of Third-Party Risk Management experience, preferably within a multinational or international environment.

• Strong understanding of:

  • Information security threats and risk management

  • Networking and TCP/IP

  • Incident response and security operations

  • Access control, encryption, and multi-factor authentication

Technical Experience

• Microsoft 365 Security Suite

• Privileged Access Management (PAM)

• Vulnerability Management

• Security monitoring and network monitoring tools

• Security and privacy frameworks such as NIST, MITRE ATT&CK, and GDPR

• Experience with firewall and router administration is an advantage

Soft Skills

• Strong analytical and problem-solving abilities

• Excellent communication and stakeholder management skills

• Ability to work independently and collaboratively within global teams

• Strong critical thinking and decision-making capabilities

Work Environment

• Global exposure with interaction across multiple regions and external security partners.

• Focus on cybersecurity operations, third-party risk management, incident response, and continuous security improvement.